$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/38cc9063-fc37-349c-9675-3e8f6dafcc2a.roa File: 38cc9063-fc37-349c-9675-3e8f6dafcc2a.roa (raw, json) Hash identifier: 6w8w8fZWcOhVUMmbwg3McJM9ndiRgmJOITIFxpcRDB8= Subject key identifier: 73:C9:53:F1:04:51:E0:8A:6B:E6:74:0C:58:D3:B1:5E:CA:70:89:5F Certificate issuer: /CN=711a04de-db2a-4e54-8693-ca6a2c107ab4 Certificate serial: 010D0C9F432858479C1128BA5174CD2EE8CA1000 Authority key identifier: 9E:4C:B6:A1:BA:B0:AD:5C:D2:C8:7D:DA:CF:9C:C2:79:6E:0B:36:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/38cc9063-fc37-349c-9675-3e8f6dafcc2a.roa Signing time: Mon 21 Oct 2024 01:00:31 +0000 ROA not before: Mon 21 Oct 2024 01:00:31 +0000 ROA not after: Sun 19 Jan 2025 02:00:31 +0000 asID: 400426 IP address blocks: 128.254.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/711a04de-db2a-4e54-8693-ca6a2c107ab4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/711a04de-db2a-4e54-8693-ca6a2c107ab4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9c:11:28:ba:51:74:cd:2e:e8:ca:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=711a04de-db2a-4e54-8693-ca6a2c107ab4 Validity Not Before: Oct 21 01:00:31 2024 GMT Not After : Jan 19 02:00:31 2025 GMT Subject: CN=d4be9e6a-bb30-4745-8abf-324fcce34b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a4:51:21:86:ba:3e:8b:d1:31:48:6c:ac:cc: 05:d8:71:70:bf:0c:45:81:49:6d:7d:39:c6:36:71: e0:a9:d9:75:80:df:65:0d:6b:bd:40:af:f3:0b:8a: 92:56:cd:d2:7a:3d:69:61:08:0a:d9:37:c3:af:41: e0:cf:96:d2:30:b9:93:3f:ba:70:c9:09:38:f7:97: 59:ca:66:ec:13:06:56:8b:4c:ee:45:19:7d:a3:1e: 5b:1b:9e:0e:ca:b8:82:45:6a:1e:10:66:12:cb:f8: 0c:bf:90:3d:0a:7c:1f:20:ea:13:3f:a9:96:25:24: d4:94:0c:b4:a8:f8:56:8d:96:64:2b:43:e7:9e:53: d5:17:d3:e2:29:fe:d7:86:bd:95:7e:97:0c:ed:86: 66:ce:5b:c6:be:01:35:c3:b0:e1:75:46:08:87:81: 12:18:84:66:e8:29:c1:a1:f7:76:2a:42:a4:9e:55: e1:da:3b:45:25:54:38:ac:a4:4b:55:90:0b:b7:36: e0:75:1c:7c:c3:16:6f:51:b1:9a:7c:5f:f0:3e:d0: 49:fd:d7:cd:13:09:e0:10:01:f1:af:4a:a3:e9:be: 83:f9:2e:93:b4:ec:6c:1b:2b:bf:c2:f9:ca:6a:a8: e1:2d:26:37:fb:e8:4f:d8:45:da:d5:43:8c:07:f3: dc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C9:53:F1:04:51:E0:8A:6B:E6:74:0C:58:D3:B1:5E:CA:70:89:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/38cc9063-fc37-349c-9675-3e8f6dafcc2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/711a04de-db2a-4e54-8693-ca6a2c107ab4.crl X509v3 Authority Key Identifier: keyid:9E:4C:B6:A1:BA:B0:AD:5C:D2:C8:7D:DA:CF:9C:C2:79:6E:0B:36:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4.cer sbgp-ipAddrBlock: critical IPv4: 128.254.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:79:44:c1:6b:c7:c1:cb:75:63:d3:cc:73:04:d3:a4:9e:59: 99:2c:bb:77:96:b2:97:bf:c9:94:1c:a2:e1:cb:37:d8:ba:bc: 36:12:1c:d3:a6:9d:e1:e5:83:56:7b:2e:84:00:5b:24:f2:e1: 59:c5:11:e5:e0:66:f0:7f:07:b2:8b:89:55:1c:0c:df:d0:4c: 00:91:c2:51:59:01:3f:84:f7:c3:3f:5e:d5:7a:89:ba:1c:54: e3:b4:98:85:7e:0c:25:70:ca:e1:de:75:b9:06:9a:90:b5:1a: b5:04:9a:5f:34:b5:fd:dd:1f:1b:01:f4:2b:a9:1d:84:1a:54: de:5d:9a:e6:75:ea:74:b3:ab:4c:6b:89:22:3c:c3:5e:b0:c9: 19:4d:7c:42:9f:54:a5:c4:ec:e2:97:91:32:71:1d:12:72:31: 01:8b:23:58:17:66:10:8d:07:89:80:13:c8:eb:b5:25:95:4f: 23:42:45:18:f6:0b:9b:71:a6:eb:ef:4f:5b:d1:ba:e9:27:18: d0:ab:6e:7d:37:cc:24:86:10:e3:8a:3a:00:96:bc:99:be:14: ec:fe:d0:5f:df:c6:1b:00:53:c5:73:5d:f7:81:f4:81:d1:1e: 5a:92:e8:ee:b1:49:ad:fd:89:4a:9b:65:e9:48:ce:85:58:b2: d7:d3:10:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEecESi6UXTNLujKEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzExYTA0ZGUtZGIyYS00ZTU0LTg2OTMtY2E2YTJjMTA3 YWI0MB4XDTI0MTAyMTAxMDAzMVoXDTI1MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZDRiZTllNmEtYmIzMC00NzQ1LThhYmYtMzI0ZmNjZTM0YjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqRRIYa6PovRMUhsrMwF2HFwvwxFgUltfTnG NnHgqdl1gN9lDWu9QK/zC4qSVs3Sej1pYQgK2TfDr0Hgz5bSMLmTP7pwyQk495dZ ymbsEwZWi0zuRRl9ox5bG54OyriCRWoeEGYSy/gMv5A9CnwfIOoTP6mWJSTUlAy0 qPhWjZZkK0PnnlPVF9PiKf7Xhr2VfpcM7YZmzlvGvgE1w7DhdUYIh4ESGIRm6CnB ofd2KkKknlXh2jtFJVQ4rKRLVZALtzbgdRx8wxZvUbGafF/wPtBJ/dfNEwngEAHx r0qj6b6D+S6TtOxsGyu/wvnKaqjhLSY3++hP2EXa1UOMB/PctwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPJU/EEUeCKa+Z0DFjTsV7KcIlfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83MTFh MDRkZS1kYjJhLTRlNTQtODY5My1jYTZhMmMxMDdhYjQvMzhjYzkwNjMtZmMzNy0z NDljLTk2NzUtM2U4ZjZkYWZjYzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzExYTA0ZGUtZGIyYS00ZTU0LTg2 OTMtY2E2YTJjMTA3YWI0LzcxMWEwNGRlLWRiMmEtNGU1NC04NjkzLWNhNmEyYzEw N2FiNC5jcmwwHwYDVR0jBBgwFoAUnky2obqwrVzSyH3az5zCeW4LNp0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83MTFhMDRkZS1kYjJhLTRlNTQtODY5My1jYTZh MmMxMDdhYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgP6IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG15RMFrx8HLdWPTzHME06SeWZksu3eWspe/yZQcouHLN9i6vDYSHNOm neHlg1Z7LoQAWyTy4VnFEeXgZvB/B7KLiVUcDN/QTACRwlFZAT+E98M/XtV6iboc VOO0mIV+DCVwyuHedbkGmpC1GrUEml80tf3dHxsB9CupHYQaVN5dmuZ16nSzq0xr iSI8w16wyRlNfEKfVKXE7OKXkTJxHRJyMQGLI1gXZhCNB4mAE8jrtSWVTyNCRRj2 C5txpuvvT1vRuuknGNCrbn03zCSGEOOKOgCWvJm+FOz+0F/fxhsAU8VzXfeB9IHR HlqS6O6xSa39iUqbZelIzoVYstfTEGQ= -----END CERTIFICATE-----Generated at Thu Nov 21 19:15:51 2024 by rpki-client on console-fra.rpki-client.org